$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c82277b8-e102-303a-860a-2c9e6c4d49f8.roa File: c82277b8-e102-303a-860a-2c9e6c4d49f8.roa (raw, json) Hash identifier: 4AQDpBDPmaP1XFIfAwrjtwYHEup/zYgn/x3iN1ZCbNU= Subject key identifier: 6D:3F:39:71:97:BA:F9:1B:40:46:80:B4:34:20:F2:EA:81:01:BB:FB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BBE405EAB89CB32690D93B0C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c82277b8-e102-303a-860a-2c9e6c4d49f8.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 140.204.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:5e:ab:89:cb:32:69:0d:93:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=29f24f44-f226-445c-8a89-18d31b99d5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:52:08:bb:ec:53:b5:27:07:f2:11:db:c0:90: f0:d3:cf:bc:58:5e:00:b8:14:de:bc:00:4f:ed:db: 76:c6:ed:6f:dd:45:ad:c7:5a:70:79:e7:f0:36:fd: 8e:c3:4c:16:53:32:e5:74:18:85:49:8f:4c:d4:f1: 7c:91:fc:6a:de:59:36:f1:e3:cf:63:6a:b3:ff:83: 15:ff:ea:33:7a:28:e7:80:73:89:56:25:13:be:d1: 10:e1:0b:1b:17:30:a5:c9:45:39:d1:19:5e:48:f0: f9:62:44:f7:f0:c9:fa:4b:2e:03:0e:86:07:60:36: 60:d9:a8:b3:70:6e:38:f7:ea:19:85:64:24:fe:8a: 92:ce:79:8c:2c:50:f8:77:3d:1e:80:8a:3f:29:49: 46:ea:fc:82:31:c8:0b:fe:f6:cd:82:fa:fc:11:e2: 75:02:ee:84:a4:60:b7:29:72:e0:bc:fe:40:0f:29: a2:81:c3:88:fa:27:2e:55:38:b0:07:4e:00:fb:c0: 72:bb:b9:00:08:e1:93:1c:c4:9c:cc:fa:8a:e5:8a: 3b:ec:5d:e4:5c:76:f3:d0:5e:a3:27:6e:4d:72:d9: d6:c2:9d:56:0a:73:b0:ad:54:16:8c:5a:3f:80:06: 2f:be:e2:b2:b7:4f:34:b2:71:18:12:26:ae:6b:28: 1c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3F:39:71:97:BA:F9:1B:40:46:80:B4:34:20:F2:EA:81:01:BB:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c82277b8-e102-303a-860a-2c9e6c4d49f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:40:ce:3d:5d:8e:68:75:8d:d9:bf:0e:51:c0:f8:91:e4:cd: 6f:a8:4d:ab:55:cf:3c:82:3b:de:52:a6:7a:cd:c3:3c:6a:a2: 31:ee:f2:98:96:d6:db:1b:93:5e:b2:c0:b8:5e:79:76:37:3f: ea:99:4d:89:06:2e:28:c0:5a:e3:69:29:64:38:55:d4:4c:68: 4f:72:cf:81:64:55:3e:fb:28:ae:59:b4:f7:e7:c3:72:31:ad: 8c:6a:e8:7b:37:0f:6f:b9:01:0f:92:3b:cf:3c:7c:39:84:a1: 72:7b:b5:ab:78:44:9a:47:ac:25:c8:80:52:70:09:a8:fd:dd: 48:d7:83:f6:29:86:aa:73:3c:8f:8d:c0:bc:30:e5:d8:90:73: a0:af:51:55:00:f8:f2:23:a6:cc:99:c3:ab:49:6e:9a:9e:bc: 75:56:31:29:bb:5a:45:95:07:7e:46:31:e3:6c:3e:57:7d:e8: fd:39:75:71:f7:86:85:9e:1d:86:15:92:75:8d:5e:db:ce:c6: 38:21:7c:b6:8e:90:2e:ed:4f:46:92:c9:93:ad:92:db:e1:1f: fa:2e:0a:e0:19:6c:57:dd:54:df:68:c8:5d:6c:03:9e:cf:aa: 1e:db:d6:67:0e:9d:29:e9:d8:c9:94:e7:c6:bc:a3:93:4f:1e: 5a:2a:38:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QF6ricsyaQ2TsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MjlmMjRmNDQtZjIyNi00NDVjLThhODktMThkMzFiOTlkNWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFIIu+xTtScH8hHbwJDw08+8WF4AuBTevABP 7dt2xu1v3UWtx1pweefwNv2Ow0wWUzLldBiFSY9M1PF8kfxq3lk28ePPY2qz/4MV /+ozeijngHOJViUTvtEQ4QsbFzClyUU50RleSPD5YkT38Mn6Sy4DDoYHYDZg2aiz cG449+oZhWQk/oqSznmMLFD4dz0egIo/KUlG6vyCMcgL/vbNgvr8EeJ1Au6EpGC3 KXLgvP5ADymigcOI+icuVTiwB04A+8Byu7kACOGTHMSczPqK5Yo77F3kXHbz0F6j J25NctnWwp1WCnOwrVQWjFo/gAYvvuKyt080snEYEiauaygcuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0/OXGXuvkbQEaAtDQg8uqBAbv7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzgyMjc3YjgtZTEwMi0z MDNhLTg2MGEtMmM5ZTZjNGQ0OWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZAzj1djmh1jdm/DlHA+JHkzW+oTatVzzyCO95SpnrNwzxqojHu8piW 1tsbk16ywLheeXY3P+qZTYkGLijAWuNpKWQ4VdRMaE9yz4FkVT77KK5ZtPfnw3Ix rYxq6Hs3D2+5AQ+SO888fDmEoXJ7tat4RJpHrCXIgFJwCaj93UjXg/YphqpzPI+N wLww5diQc6CvUVUA+PIjpsyZw6tJbpqevHVWMSm7WkWVB35GMeNsPld96P05dXH3 hoWeHYYVknWNXtvOxjghfLaOkC7tT0aSyZOtktvhH/ouCuAZbFfdVN9oyF1sA57P qh7b1mcOnSnp2MmU58a8o5NPHloqOPs= -----END CERTIFICATE-----Generated at Wed Nov 5 04:57:34 2025 by rpki-client